Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Jaroslaw Rafa via mailop
Dnia 23.09.2021 o godz. 08:21:40 Sidsel Jensen via mailop pisze: > > Unfortunately we can only do this in our Webmail, we have no good way of > sending this message to a user of a 3rd party mail client. If someone on > this list has a good idea on how that can be accomplished with a good UX I > am

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Steve Freegard via mailop
Hi Alessio, You could try our Authentication Blocklist: https://docs.abusix.com/ami-production-zones/authbl This doesn't pre-emptively list cloud IPs, it only lists IPs where we've seen evidence of compromise/abuse and these come from a variety of sources, some of them I believe to be novel

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Renaud Allard via mailop
On 9/23/21 10:56 AM, Steve Freegard via mailop wrote: Hi Alessio, You could try our Authentication Blocklist: https://docs.abusix.com/ami-production-zones/authbl This doesn't pre-emptively list cloud IPs, it only lists IPs where we've seen evidence of compromise/abuse and these come from a

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Geert Ijewski via mailop
On 23.09.21 11:45, Jaroslaw Rafa via mailop wrote: > Dnia 23.09.2021 o godz. 08:21:40 Sidsel Jensen via mailop pisze: >> >> Unfortunately we can only do this in our Webmail, we have no good way of >> sending this message to a user of a 3rd party mail client. If someone on >> this list has a good

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Christian Mack via mailop
Hello On 23.09.21 12:59, Geert Ijewski via mailop wrote: > > On 23.09.21 11:45, Jaroslaw Rafa via mailop wrote: >> Dnia 23.09.2021 o godz. 08:21:40 Sidsel Jensen via mailop pisze: >>> >>> Unfortunately we can only do this in our Webmail, we have no good way of >>> sending this message to a user o

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Michael Sofka via mailop
We have had to do this to select users when there's evidence of a password compromise. And yes, it could be mistaken for a phish, so we don't include a password change link, direct people to our helpdesk page with instructions on finding the change password instructions, provide a local contact

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Hans-Martin Mosner via mailop
23. September 2021 14:32, "Christian Mack via mailop" schrieb: > Hello > > On 23.09.21 12:59, Geert Ijewski via mailop wrote: > >> On 23.09.21 11:45, Jaroslaw Rafa via mailop wrote: >>> Dnia 23.09.2021 o godz. 08:21:40 Sidsel Jensen via mailop pisze: >> >> Unfortunately we can only do this in

[mailop] Paging the Yahoo! postmaster

2021-09-23 Thread Ken O'Driscoll via mailop
Hi there, I have an ESP client that appears to be stuck in an stock reply loop with a particular postmaster issue. The issue relates to 421'ing on a specific IP, which is used by a single sender for transactional messages. They have been trying to get this looked at for nearly a month, and I'm

Re: [mailop] Paging the Yahoo! postmaster

2021-09-23 Thread Matt Vernhout via mailop
Ken, Check out https://postmaster.yahooinc.com/ for help - there is a contact form and an email address you can reach out to for help directly from the Yahoo team. Cheers, ~ Matt Vernhout http://www.emailkarma.net Twitter: @emailkarma/@CAUCE On Thu, Sep 23, 2021 at 9:26 AM Ken O'Driscoll via

Re: [mailop] Paging the Yahoo! postmaster

2021-09-23 Thread Ken O'Driscoll via mailop
Hi Matt, They know how to open cases, and have done, and have incident numbers etc. That’s not the issue. The problem is the non-response to the cases they have open with regard to this one IP. They open cases all the time without issue. I think there’s some quirk here that requires manual int

Re: [mailop] [E] Re: Paging the Yahoo! postmaster

2021-09-23 Thread Lili Crowley via mailop
Hi Ken - Please contact me off list. thanks! Lili Crowley she/her Postmaster On Thu, Sep 23, 2021 at 10:22 AM Ken O'Driscoll via mailop < mailop@mailop.org> wrote: > Hi Matt, > > > > They know how to open cases, and have done, and have incident numbers etc. > That’s not the issue. > > > >

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Jay Hennigan via mailop
On 9/23/21 02:45, Jaroslaw Rafa via mailop wrote: Dnia 23.09.2021 o godz. 08:21:40 Sidsel Jensen via mailop pisze: Unfortunately we can only do this in our Webmail, we have no good way of sending this message to a user of a 3rd party mail client. If someone on this list has a good idea on how t

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Grant Taylor via mailop
Hi Sidsel, On 9/23/21 12:21 AM, Sidsel Jensen via mailop wrote: Each hash in haveibeenpwned is associated with a count based on how many breaches it’s been found in. If we find a match on the hash we check the count towards a set threshold, and if the count is higher than the threshold the us

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Peter Nicolai Mathias Hansteen via mailop
This discussion made me think of one of the several bizarre episodes involving my spamtraps apparently becoming part of the must-try user IDs for other services - https://bsdly.blogspot.com/2014/08/password-gropers-take-spamtrap-bait.html

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Robert L Mathews via mailop
On 9/23/21 9:42 AM, Jay Hennigan via mailop wrote: > While you do this, also tell them to ignore phishing emails that claim > to be from their provider warning that their email account is at risk. A lot of this now seems like just poor user interface. Email software authors (and many of us, inclu

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Michael Peddemors via mailop
On 2021-09-23 11:25 a.m., Robert L Mathews via mailop wrote: Or "This message is verified as being from gmail.com, but there's no previous message fromevild...@gmail.com in your mailbox." For the record, the scammers are trickier than that, they take an old thread from the compromised account

[mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread John Levine via mailop
A bizarre new Texas law makes most spam filtering illegal, effective Dec 2: “An electronic mail service provider may not intentionally impede the transmission of another person’s electronic mail message based on the content of the message” unless: * it “provides a process for the prompt, good

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Jarland Donnell via mailop
* “the provider has a good faith, reasonable belief that the message contains malicious computer code, obscene material, material depicting sexual conduct, or material that violates other law” And guess what I have on all of my spam filters? Good faith, reasonable evidence and belief that it co

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread John Levine via mailop
It appears that Jarland Donnell via mailop said: >> * “the provider has a good faith, reasonable belief that the message >> contains malicious computer code, obscene material, material depicting >> sexual conduct, or material that violates other law” > >And guess what I have on all of my spam filt

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Jarland Donnell via mailop
Also fun to totally read Sec. 321.114: https://statutes.capitol.texas.gov/Docs/BC/htm/BC.321.htm#321.114 Looks to me like plenty of reasonable ground for operating as usual to anyone who is operating in good faith to begin with. On 2021-09-23 21:53, Jarland Donnell via mailop wrote: * “the p

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Rathbun via mailop
On 23 Sep 2021 22:45:48 -0400, John Levine via mailop wrote: >* it “provides a process for the prompt, good faith resolution of a dispute >related to the blocking with the sender of the commercial electronic mail >message” or Fortunately, all of the senders that I publicly announce that I am b

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread John Levine via mailop
It appears that Jarland Donnell via mailop said: >Also fun to totally read Sec. 321.114: >https://statutes.capitol.texas.gov/Docs/BC/htm/BC.321.htm#321.114 > >Looks to me like plenty of reasonable ground for operating as usual to >anyone who is operating in good faith to begin with. Do you real

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Jarland Donnell via mailop
Sure. If everyone operating out of or with customers in Texas disables their spam filters, I'm sure I'll have the time, money, and representation. On 2021-09-23 22:26, John Levine wrote: It appears that Jarland Donnell via mailop said: Also fun to totally read Sec. 321.114: https://statutes.

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Rathbun via mailop
On 23 Sep 2021 23:26:12 -0400, John Levine via mailop wrote: >Do you really want to negotiate with every spammer who complains >you're blocking his stuff, as 321.114(a) requires? How much free time >do you have? Plenty. I'm retired. However, given that the quoted statute claims to govern "inte

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Peddemors via mailop
This thread will probably be a rehash of the many conversations had on this topic, but the laws always protect the rights on who you open your door to, and who you decide to let cross the thresh hold... It's just really sad, that instead of going after malicious dangerous offenders we keep bri

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread John Levine via mailop
It appears that Michael Rathbun via mailop said: >On 23 Sep 2021 22:45:48 -0400, John Levine via mailop >wrote: > >>* it “provides a process for the prompt, good faith resolution of a dispute >>related to the blocking with the sender of >the commercial electronic mail message” or > >Fortunately,

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Rathbun via mailop
On 23 Sep 2021 23:42:38 -0400, "John Levine" wrote: >Oh, you can't block them at all. See sec 321.054. > >https://statutes.capitol.texas.gov/Docs/BC/htm/BC.321.htm#321.054 Which states, unless my monitor deceives me, that the denial must be "based on the content of the message". Since the tota

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Rathbun via mailop
On Thu, 23 Sep 2021 20:41:41 -0700, Michael Peddemors via mailop wrote: >Why is there no laws that help protect the innocent victims of all the >phishing attacks that go on unabated from some of the largest companies? In the case of unsolicited broadcast email (UBE, spam) the laws tend to be wr

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Jay Hennigan via mailop
On 9/23/21 19:45, John Levine via mailop wrote: A bizarre new Texas law makes most spam filtering illegal, effective Dec 2: “An electronic mail service provider may not intentionally impede the transmission of another person’s electronic mail message based on the content of the message” unle

Re: [mailop] Got any users in Texas? Better turn off your spam filters by Dec 2

2021-09-23 Thread Michael Peddemors via mailop
On 2021-09-23 10:26 p.m., Jay Hennigan via mailop wrote: On 9/23/21 19:45, John Levine via mailop wrote: A bizarre new Texas law makes most spam filtering illegal, effective Dec 2:   “An electronic mail service provider may not intentionally impede the transmission of another person’s electro